Steal Personal Data? There's an App for That

[Osiris]

Steal Personal Data? There's an App for That

Think you need a Jailbroken phone to be insecure? Not according to SpyPhone, an app that can harvest all kinds of personal data including passwords, geolocation data, and browsing history, all using the public API in Apple's SDK. The linked PDF in the article explains how this can be done. Sweet!

In order for this application, SpyPhone, to work, it does not need any exploits or any jailbreaking/firmware modification, attacks in order to access the iPhone's data. Instead, SpyPhone relies on using the iPhone's usability and depth of features to its advantage. Once an application is on an iPhone, it has unrestricted access to the large amount of the data and settings available on the device.
​

 

[jtfunkymojo]

I feel sorry for Apple.

 

[THRiLL KiLL]

the problem is tricking people into installing the app.

the exploit with the hacked iphones, was using ssh. and if you were stupid enough to leave the default password,,, well you had it coming.